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MEMORANDUM FOR THE CHAIRMAN, INTELLIGENCE OVERSIGHT BOARD 


THRU: Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT: (U/ /FOUO) Report to the Intelligence Oversight Board on NSA Activities - 
INFORMATION MEMORANDUM 

(U//FOU0) Except as previously reported to you or the President, or otherwise stated in 
the enclosure, we have no reason to believe that any intelligence activities of the National Security 
Agency during the quarter ending 30 September 2009 were unlawful or contrary to Executive 
Order or Presidential Directive and thus should have been reported pursuant to Section 1.6(c) of 
Executive Order 12333. 

(U/ /FOUQ) The Inspector General and the General Counsel continue to exercise oversight 
of Agency activities by inspections, surveys, training, review of directives and guidelines, and 
advice and counsel. These activities and other data requested by the Board or members of the staff 
of the Assistant to the Secretary of Defense (Intelligence Oversight) are described in the enclosure. 



(U/ /POUO) I concur in the report of the Inspector General and the General Counsel and 
hereby make it our combined report . 



Lieutenant General, U. S. Army 
Director, NSA/Chief, CSS 


Encl.- 

Quarterly Report 

This document may be declassified and marked 
“UNCLASS1F1ED/ /1 ui Ollickt U ' sc On))* 
upon removal of enclosures) 


TOP SECRET//COM1NT//NOFORN 


Approved for Release bv NSA on 12-19-2014. FQIA Case # 70809 (Litigation)) 
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i OP SLCRrT/.'COMIN i - ' NOi URN 


•Mb) (1) 

(\b) (3)-18 use 7 98 
(b) (3)-50 use 3024 (i) 
(b\) ( 3 ) -P . L . 86-36 


>.L. 86-36 


1. (U/ /FOUO) Intelligence, counterintelligence, and intelligence-related activities 
that violate law, regulation, or policy substantiated during the quarter, as well as 
actions taken as a result of the violations 


{Us Intelligence Activities 


1 1V. .vb'Rij. TO lu-iA. i'VhV) Unintentional collection against United States persons 


['his quarter, there were ! | iinstances in which Signals Intelligence (SIGINT ) anah sts 
inadvertenrh targeted or collected communications to, from, or about l tailed States (I ,S.) 
persons while pursuing foreign intelligence tasking. All intercepts and reports have been deleted 
or destroyed as required by I tailed States SIGINT Directive (USS1D) SP0018. 


(! v" ! <[ R i d TO USA. tW 


per 


tod,| | valid foreign targets 


Travel.to the United States. During this reporting 
the United States. 


( D> SI m i 1() USA. I VI .Vi On. 
targets had arrived in the United States on 


N SA anah sis learned thatl lot their 


] 


Collection was suspended on 


intercept obtained while the targets were in the United States was deleted from an NSA database 
No reports were issued from the deleted intercept. -.(i) 

/ '(b), (3) - P.L. 8 6-36 

(jo i i sa. f vL¥ h An n'n A analyst failed to check his target's telephone selectors 

Jlhat his target's 


when he learned on 


The_Jte ie phone «c lee to is were dt sked t i[ 


"[selector was 


A report based on unintentionally -collect ed domestic communications containing foreign 
intelligence inton nation-was issued to the 


as'allowed by Attorney General authorized procedures and USA reporting 


policy. 


::: M- Mb) (1) 

(by (.3) - P . L . 8 6-36 

(TSVS1//RCL TO USA. FVOY; Analyst error resulted in a selector remaining on taskin g for 
three da ,chile t he associated foreign intelligence target was in the United States, On 

the analyst submitted the selector for detasking when she learned [" 


the United States. 


ted on|_ 


correc 


NSA databases. 


The discrepancy was found and 
when the ieiectoi was detasked and collection was purged from 


rrSABI.YRT'L TO USA. TVCY) Collection occu rred on a foreign intelligence target while 

he was in the l nited States. On_ | j NSAancWIga ncdt K tta target 

traveled to the United States; orj 


Collection was purged irom an NSA database on|_ 


(b) (1) 

(b)(3)-P.L. 86-36 


Derived From: NS \ CSSM 1-52 
Dated: 2(K)7tl|U8 
Deelassilx On: 20320108 


I UP M ClC - i (HUlNi >! < >R\ 
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TOP S'FCRi-:'lV ' C0MI?^T//N01 T 0RN 
(1 Hf'bU'RLL 10 UbA. i V i V) An NSA analyst overlooked 

i 1 I 

foreign intelligence t arget's selectors 


(when he detasked a 
the l United States on 


! he selector was Pound and detasked on 


Jmtercept 


collected while tin ta rget was in the United Mates was purged from an NSA database on 


0 ) Tasking Error 


";brt A 

(b) (3) -P.'E'd 86-36. 


(TSi ’ VS I/^F) A U.S. telephone number was mistaken]} tasked for collection. 

| | ail NSA anal yst tasked a telephone number believed to be associated with a foreign 

inte lligence target. 


on 


_Ja I PS. number. 1 he selector w as detasked 
was purged. No reports were issued on the collection. 


resulting intercept 

■ (b) (1) 

(b)(3)-P.L. 86-36 


if:. !ir\D 


an NSA language anal) si learned that 


task* I telephone ntm her s electors believed to be used b) foreign intelligence 'gets. IT 
resulting collection of [ | calls was deleted and the selectors were detasked on 
No reporting was produced based on the collection. 

(b) (1) 


O') Database Queries 


(b) (3)-50 USC 3024 (i) 
(b)(3)-P.L. 86-36 


fi 1/LK'n O H [ occasions, analysts constructed poor database queries that had i te effect of 
targeting U.S. persons in databases with unminimized SIG1N1 information, and on I lof those 
occasions, the queries returned results from the database, the returned results front the overly 
broad or incomplete queries were deleted, and no reports were issued. Procedural errors 


contribute 


nco mpie te qu erie s were ueie 
d tol |of «he| |v lolations. 


(TS/.mV NQ 


an NSA analyst queried^ 
in anNSX database. The error occurred because 


(b) (1) 

(b)(3)-P.L. 86-36 


proper veri fication of the 


results which were deleted on 


query results. 


the analyst did not perform 
before submit ting the query. 1 he query returned 

No reporting; was issued based on the 


* 

; v.i vu 


ftbBl. 

(ti T3.) -iS" : me: -798 


(b) ) -'5.0 USC 302^1 



the database auditor found the error. 1 he analyst 


(b) (3)- — P . L8 6-36 

deleted the q 

aery results on 

w hen, he returned from leave The . mils were 


not reviewed prior to deletion. 



MS Si iU 1. I.U 1 'VA.rV Mf 


database 

on a foreign intelligence target while 

: the target was in the 

U it sti r s anal) st mistakenl) believed that lie could search 


klve United States. 1 

resulting 


Intercept was purged from the NSA database on 


(b) (1) 

(b)(3)-P.L. 86-36 


TOP hTCRPT' TTtMINT'NOrTfRN 
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'rw (i)... 

(b) (3)-- 


'’(b)(1) 
(b) (3) - 




/Xb) (1) 

/ fe) (3)-18 USC 798 
/ (%) (3)-50 USC 3024 (i) 
; (9), (3)-P.L. 8 6-3 6 


in 

number. A SIGINT analyst 

-Id 


human error resulted in the tgrggtiligfof a U.SAcle phone 


fa foreign intelligence target in an NS A database containing 


uj dnimi/c d < nd unevaluated SIGINT data. The query and results were dele 
No reports were issued. 


Cp-.- a.6-3 6 


(I S - SI \li 


in NS Vanalysl queried I '.S. Coinnumicaliom 


1 1 - - 

Security (COMSI.-.C) telephone numbers in an NS A database. The query \ 

returned fgsujts_ The data retriev ed by the quay had aged «» t of the database by , 



(Sz/SU/N T 
c 


_while rev iewing skills learned in a query tool training 

lass, an NS A analyst queried on himscll f" l and another U.S. person[ I The 


analyst explained that he thought the query tool, was a training version. This violation 
was found by the analyst's auditor. No collection resulted from the mistake, I he analyst 
completed additional USS1D SP0018 training and was counseled that targeting U.S. 
persons was not authorized at any time. 




a SIGINT analyst targeted a U.S. telephone number 
when query ing a telephone number believed to b e used by a valid foreign intellig ence 
target. The mistake occurred because the analyst 
query did not return am results and was deleted 
returned from leave. No reports were issued. 


The 

(when the analyst 




an NS A analyst queried an 


because! 

query. arid no reports were issued. 


I he anab st believed that it could be queried 

No collection resulted from the 


(lb SIAM i 


[ 


an KSA analyst inadvertently targeted a t S. 


while researching information on 


associated with a valid foreign target. 

he query produced 


Tie erroneous.query was detected by on nuditoi 
, | [ results ; however, no reports were issued has, d e »the qu ” j. The anal}$t dotasked 
the selector 


tTS ; 'Sk» ^R 


an NS A analyst performed a query on 


that resuhed in the collection ot l .S. data due to a system error | 

The analyst deleted the results without fe\ iewing.thenj_ 


P.L. 8 6—3 6 


TOP Qr.CRrX*/(:OMINT//NOPORN 


(b) (1) 

(b) (3)-18 USC 798 
(b) (3)-50 USC 3024 (i) 
(b) (3)-P.L. 86-36 
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7b Ml) 

(b) (3'M: 


tSf-fS':": 

(b) - 




m (i) 

ib);,(3) -18 use 798 
f-b) (3) -50 USC 3024 (i) 
/! (b) (3-MP.L. 8 6-36 


IJ.S. persons. An NSA analyst performed! 


human error resulted in the targeting of the 


_Jqu gnes 
The 


result . The analyst deleted the queries and query results en| 
reporting was isst, l ha? cd on the queriesr 


qu eries yielded u total oi| 


of 


.t- Hv- H ' M i 


using 


No 


\L. 8 6-3 6 


immediately deleted the query and | | results from the database. 


an VS \ anal yst queried a raw SjGfNT database 

After realizing the mistake, the analyst 
No SIG1N T reporting 


was produced from the query results 
t is hj Nl i 


an NSA analyst performed a query on. 


jin r raw S1G1NT database while researching a foreign intelligence target. The 


mistake occurred because the analyst was not familiar with using, 
analyst deleted the query and:results that same day. 

the database. The 

(TSriSI/VNF) During an audit of an NSA database 


database 

auditors noted that an analyst had queried ( 

>:n| 

The 

error occurred when the analyst copied and pasted thd from one database to 

another. After realizing the error, the analyst deleted the query N 


information was disseminated. 

(U} One End of the Communication in the United States 


/ (b) (1) 

/ (b) (3)-50 USC 3024 (i) 
■' (b)(3) -P . L . 86-36 


(bi'N ' d-‘/ RTL R) t T<; ■ * ,. PVT'Yt By agree n nt c tuant q Uxet ti v Paler 12.TTT unmin imized 

sigint! 



(U) Detaskmg Delay 


TS//SI//REL TO USA. TVI:y£ 


(b) (1) 

(b)(3)-18 USC 798 
(b) (3)-50 USC 3024 (i) 
(b)(3)-P.L. 86-36 

^Selectors associated with a valid foreign 


intelligence target remained on tasking alter the target entered the t nited States on 


P.L..8.6-3 6" 


the NSA analyst ctetasked the selectors onl 


ifler returning from leave. No collection occurred between: 


and 


( j' F VAlh/NK) 
detasked for two d 


(telephone selectors related to a U.S. hostage in Jwere not 

ays following the hostage's release. The NSA analyst/Was notified by 


[ 


]at which time the selectors were detaskeu. WM 


lC 


TUP SE0M717C^\tI>fl7/K01‘GftN 

4 


(b) (1) 

(b) (3)-50 USC 3024 (i) 
(b)(3)-P.L. 86-36 




























DOCID: 4165579 


\(b) (1) 
(\t>)' .(3) ■ 
(b) (3)- 
(b.) (3)- 


TOP fRHT/A'() VH\T' 'NOFORN 


(b)(3)-P.L. 86-36 


NSA's Attorney Genera! authorized procedures allow the targeting of I fS. persons 
reasonably believed to be held captive by foreign powers, collection should have ceased 
w hen the hostage was released. No collection occurred from the unauthorized targeting, 
and no reports were issued for that timeframe. 

-r- nTSlARPI • TO US A. FVTY ) A selector belonging to a foreign i aJhadnec target was 
not detasked w hen the target traveled to l 
one case due to a software problem in the) 


re United States on two separate occasions, in 

\1 though an 


NS A analy st detasked the e-mail solector on 


failed to detask the selector. The analyst did not 


verify the detp skinc and was not aware oitho software problem until 
the analyst was 


from 


On. 


the analyst detasked 


t _ No report, were issued. ..Tire software problem was not corrected 

by the end ot the reporting quarter, hut a process was'implemented tt' notify analysts 
when detasking does not occur. We will provide an update when the software problem 
has been resolved. d) 

T (b)(3)-P.L. 86-36 

{TS/.’bl-MF) Human error caused targeting ofO.S. perso ns be yond the dates in\ 
consgnsual coll ecti on agreements',' Targ eting occurred ot | p cc sions between 


and 


_ J ( _Jbecause NS A analysts did not review consensual 

collection tasking. No v. diet lion resulted from the targeting errors. 1 he errors resulted 
from a lack of training lor new personnel, personnel transition, and manpower shortages. 


1 o reduce the risk of recurre nce, the organization createc 


before each authorization's expiration 


i lb S| N1 ) Human error resulted in the taructinu of a li.S. person when q n analyst 
targeted a 


a foreign 

he anah st did not eon.Hder that 'this could retrieve results on the 


-18 use 798 intelligence target. 

-50 use 3024 (i ) I ,S, pci sun. Wh ile reviewing the query results, the analyst recognized the mistake. On 

the analyst deleted the query and the results were deleted from the-NSA 


. L. 8 6-36 


d; i if ;. N reports were issued. The analyst was counseled on how to create proper 


queries. 

(TS//SJ//NF) Dissemination of U.S. identities The NSA Enterprise issued! 


"'(b) (1) 

(b) (3)-P.L. 


86-36 


SIGINT 


product reports during this quarter, in thos e reports. SiGIN F analysts disseminated 

I S. persons or entities obtained while pursuing 


communications to. from, or about 
foreign intelligence targets. 


S1G1N1 products were cancelled as NSA and Second 


Party partner analysts learned of the U.S. persons, organizations, or entities named in the 
products without authorization. 1 he data was deleted as required and the reports were not 
reissued or they were reissued with proper minimization. 


(S//9R/RCL TO USA, rvm 


TOP IFCRFT '■ < All VI ■/HUi URN 


5 
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! 6-36 


l op :sk r i - i mmiN) \oinR\ 


(,b) (1) 

(b)(3)-18 USC 798 
(b) (3)-50 USC 3024(l) 
(b) ('3) -P.L. 8 6-3 6 


d )The Foreign Intelligence Surveillance Act (FISA) 

(U) Unauthorized Targeting 

an "NSA analyst reviewing 


(TS r dSF/RIiL TO USA. FVEV) On_ 

, learned tha t a foreign target had traveled to the I ini led States. [ 
deleted the 


_selectors 

J (he anaiy st 


and instructed! branch personnel to delete an e-mail 


No reports were issued based on the collection. 


(IS hi ' N) ) 


on a 11S(. orvlgt remained on Ut&KimJ 


an VS A an th learned that a selector for an gj [ wed target 


tasked from 


The selector remained 


_' T he ana h st detasked the telephone number on 

No reporting was issued from the| [intercepts eollected from the selector. 




.m NS A an ily st targeted a l IS. person before proper 


authorization had been obtained. The analyst immediately deleted the query after realizing that 
the selector belonged to a I IS. person No collection resulted from the query 


(U) Database Queries 


ib)(3)-P.L. 86-36 


i pccasions, SIG 

INI re no rts were cancel 

1 , i\ 

review, the NS A 



cd and not reissued. During a 
Chief found that l l.S. 

'was 


organizations were mentio ned in the reports. On the first occasion, 
listed, and in the remaining! [reports, an association was mentioned. The reports were 


reissued with proper minimization. The|_parcelled S1G1N 1 reports are included in the item. 

above on unintentional dissemination of l .S. identities. 

(b)(1) 

A h , n v (b) (3)-18 USC 798 

(U) Retention A T nT - <b) (3) -p.l. 86-36 


lb SI i<l I TO t v\. | Vi Vi 


an NSA database developer noted that a 


database contained ] IS A data older than the retention time authorized by the court. The data 


was discovered, during a revievv oi| 

All files containin 

i the FISA data were moved 


1.0 prevent future retention errors, the developers hav e 


and implemented 


ISA data and permanently remove FISA, data older than One year. 

H-Pr-4ki--N-B Business Records (BR) Order : ""'"(b) ( 3 )-p.l. 86-36 

(T-S ASI//NF) Business Records Order ! I On 17 and 22 September 2009. an NSA 

analyst forwarded reports and an e-mail to_:le m d personnel who had not received required 

specialized BR training. 


(b) (3) - p. l . 86-36 TOP SI 1 f 'R I ■ T 1 '/FOMIN i \OI(rR\ (b) (1) 

1 v 1 LA - n ' ' 1 ; M1 1 UJCZI ‘ (b) (3) -50 USC 3 024 (i) 

6 (b) (3)-P.L. 86-36 
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b). (3) -P 


\( b) (1) 

(b)' (3) -P.L. 86-36 


TOP SECRET, i r /COMlKT//NOFOKN 


S//SI//NK) Pen Register/Trap and Trace (PR/TT> Order 


(TOTUUNF) 


atiN.SA analyst initiated a query beyond the authorized number 


of hops from an ■ pp. wed PR/ i t „T1: address. lire a nalyst \vi u< big an earlier version of a 

software tool _ t he query did not produce any results. 

The latest version of the tool was implemented 

&MM M B 



(U) The Protect America Act (PAA) 

(U) Nothing to report. 

(1 ) The FISA Amendments Act (FAA) 
(U) Section 702 

(U) Targeting 


(b) (1) 

(b)(3)-50 USC 3024(i) 
(b)(3J-P.L. 86-36 


(TS7SUTUIL 1 

lu t u 1'VUY) A software error caused a foreign intelligence target, tasked 


under the FAA 

/Certification, to remain on collection at NSA 



[while the target was in the United States.. The soltware error 

occurred on) 

and lasted >n!\ two minutes. While preventing the complete 



del a: kim. t ff .'ecu. , ih- i< _,7 u mt i acc in i icnt 'a a successf .d den skin-, i he error was 


found 


detasked betvvee!i|_ 


he selector was 

Research to determine if other tasked selectors were 


• L. 


a fleeted by the same software error was conducted. No other selectors were affected. All 
rc nil lgcoll ;iii n s purged from NSA databases, and no reports-were issued from the 
collection. . 7(b) (i) 

6 _ 36 I .. ■ 77(b) (3)-P.L. 86-36 

t 17 Til • :RU. TO I ISA. FV m On| |an NSA analyst erroneously interpreted data 


and targeted a non-U.S. person without su fficient basis t o believe that the target 

collection obtained for that 


had left tire United States. The selector was detasked on| 
time period was purged from NSA databases, and no reports were issued. 


i TS/7SI7RRL TO USA. FVEV) Sel ectors tasked on 
intellig ence target w ere detasked. on 
review 


for a foreign 


on the advice of the NSA OGC. Upon 


mu discussions with the tasking analyst, the OGC 
determined NS \ had insufficient jus tification to task tire .selectors. D ata collected from 

and no reports 


atn >rne\ 

the selectors was purged from NSA database 
were issued from the collection. 


(b) (1) 

(b)(3)-18 USC 798 
(b) (3)-50 USC 3024 (i) 
(b) (3)-P.L. 86-36 


11 )P 817'RUT•VCOMINTZ/NOFORN 

7 
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m (i) 

(b) (3.)-50 use 3024 (i) 
(b) (3)"-P,.L. 86-36 


top sriCRL'm vmm \ mi)\ : oRN 


.. ffb-U i) 

A (b)\(3)-P. L. 86-36 


Kb)(1) 

•(b) (3)-18 USC 798 
(ib) (3) -50 USC 3024 (i) 
(b) (3)-P.L. 86-36 


Til) Detaskirig Delay 


tasked under tfid 


T O LISA, FV1A B On I / occasions the selectors for foreign intelligence targets 


the United States from 


Ce rt ideation remained on tasking while tlic targets were in 
funtil 


lthe United States, the NS/ 


lound the soft w are mistake o nl 
the selectors on 


(b)(1) _ 

(b) ( 3 )-p-,l, deleted from NSA databases! 


itg privileges had been charmed. T he analyst 

I detasked 


Co llection th oc- * . * n * 'U lie targets u . > - T Un ited States 




detasking of a. sel ector] 
e-mail selector onP 


NSA an aly sis discovered that a software glitch prevented the 
ieskle the United States. NSA att empted to detask the 
EvhcWlt the United States. \ 

pent duplicate detasking entries to the tasking system, causing 


(b) (3)-P.L. 86 


Research revealed that the_ 

the system to ignore the detasking request. I he software ditch was eorreciedr 


nbiftiWmiL ft) USA. rVLV) While conducting a 


FAA selector review] 


(b) (1) 

(b) (3) 5- 1) USC 3024 (i) 
(b) (3) -P.L. 86-36 


an NSA analyst found that one selector belonging .to a target was missed when the target's 


] 


khe 


(b) (1) 

(b)(3)-P.L. 


mteci suites- the Selector wa s deiasked| 


and no reports were issued. 


J N o col lection resulted bet-wee q 


8 6-3 6 .. „ 

(IS/'Sl^RJBL IQ USA, TVEY) Human error resulted in a delay in detasking an e-mail selector 


selector, l tie selector was detasked on 


to deta sk the 
Jv\ hen the e-mail selector was_ 


the U nited States. and rcsuiting cuHectionwas purged from an NSAdatal^ise 


(b) (1) 

(b)(3)-P.L. 


86 Tl^ili.iMRLI, TO USA. FVC T n A target, tasked tor collection under the FAA| 
Certifica tion, was not detasked in time to a 
States on 


/ detasked untijf 
detasked. 


zet entered the United 
Although the NSA analy st s ubmitted the detasking request on 

Consequently, the selector.was not 


was purged from an NSA database] 
were issued on the intercept. 

(U> Dissemination 


|was collected before the target's selector was 

No reports 


(b) (1) 

(b) (3)-18 USC 798 
(b) (3)-50 USC 3024 (i) 
(b)(3)-P.L. 86-36 


( )TwVfv{/^N.j-o | l SKdN'1 reports w ere cancelled and not r eissued. In t he first report, ft foreign 


intelligence target tasked under FA/y 


Certification 


(b) (1) 

(b)(3)-P.L. 86-36 


■ffl SFCRhT M CX)Ml?kl^Ol'ORN 

8 


(b) (1) 

(b) (3)-50 USC 3024 (i) 
(b)(3)-P.L. 86-36 
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(b) (3)-sO usu 3024 (i) 

(b) ,(3 ) -P . L. 86-36 


OPSl.t HI 1 comp; 1 • NOIOTN' 


l ; nlu 1 fjMi . I lothu : reports, all on the same foreign intelligence target tasked under F A A 

Certificati on, w ere cancelled when NS A nalysls learned that the target 
was a naturalized U.S. citizen. l 'ne | [ cancelled SI.GINT reports are included in the 
aforementioned section on the dissemination of U.S. identities. 


(S/'REL TO USA. r¥UV) |_an NS A analyst forwarded FA \ data to NS A 

personnel, some of who m were not . uli c N e d to view FAA data. The e-mail was, recalled and 
recipients deleted copies 


(U) Section 704 

(U) Nothing to report 

(U) Section 705b 

(U ) Database Queries 


(b) (1) 

(b) (3)-P.L. 86-36 


'/(b) (3)-P.L. 86-36 


[an NSA analyst did not perform due diligence prior to 

{request for information. The analy st who is the subject 


(Ts.hsr/A'Jr) 

conducting a query m response to 

matter expert on the foreign intelligence target, wa s c n. 1 - v - 1 o mother an alyst researched the 
request. Although the analy st was not told that flit was a U.S. person who 


was previously the subject of FAA 7t)5h coverage, the analyst should have fully 
researched the target prior to acquiring data on a foreign intelligence target. 1 he analyst 
fai led to cheek th e expiration of the court order prior to his query. The court order had expired 


on 


he mist ake was 'found by the subject matter expert v. hen h e returned from 


disseminated to 


I he queried data was deleted 
and no reports were issued. 


No data was 


i Di sr Hi 1 10 1 .V rV . 1 V : 

foreign intelligence target's selector in a NSA databas 


(b) (1) 

(b) (3)-P.L. 86-36 


an NSA analyst mistakenly queried a 


The analyst realized the error and deleted the query results ort| 
No reports were issued on the query results. 


(U) Other 

(U) Unauthorized Access 

(U t Computer Network Exploitation (CNE) 


(b)(1) 

(b)(3)-50 USC 3024(i) 
(b)(3)-P.L. 86-36 


fib M M i 





TOP rsFCRrU/UUMIN 1 ' Mil URN 
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(b) (1) 

(b)(3)-18 USC 798 
(b)(3)-50 USC 3024(i) 
(b)(3)-P.L. 86-36 














(U) Dissemination 


imtrREL TO USA, FVi - AH 


(b) 

(b) 

(b) 

(b) 


1 ) 

3)- 

3)- 

3)' 


a SIGINT analyst sent an e-mail, containing 
unminimized U.S, person data to a customer and an NSA data repository. The mistake was 
discovered by the recipient, who deleted the e-mail and requested a minimized version. The 
analyst subsequently deleted the e-mail and resent the e-mail with minim ized data. The c opy 
containing unminimized I S, data sent to the data repository was deleted 


•18 USC 798 
■50 USC 3024 (i) 
■P. L. 8 6—36 


(U) Collection 


(b)...(l) 
(b) (3) 


-p.L. 86-36 


Selectors were tasked at a 


]did not have authorization to task under the FA A. 


t rs si ri i to usa. rvr.Y) 

by an analyst who was unaware that 
Responsibility for the selectors was transferred to an NSA Washington organization authorized 
to conduct FAA-related tasking 


(U) Counterintelligence Activities 

(1 ) Nothing to report. 
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) (3) -5 0"'XISG 302 4 (i) 

(3) -P.L. 86-36"'" ■ 


TUP ShCkbUl n\1 l \ i Somitv. 


(b) (1) 

(b)(3)-P.L. 86-36 


(f ) intelligence-related Activities 


, (TS//SI//NF) To reduce the risk ofunaulhori? u telephom collection arid prevent violations, 
\NS\ insulated a pgxgss to gjye analysts, greater and luster insiul t into - v.ireels location 



In thej Instances when collection 


occurred, it was purged fr 

om NSA databases. 



ITS//SI//NFV 


] 




NS A analysts found! b-raail selectors 


occurred in 


r W{ 


jnsliinceS'-and-Avas’-ptiTyed-frotir-NSA-datahask 




v.0 flection 

. : ' 7(b) 

i (b) 


1 ) 

3)-P.L. 


86-36 


( 1 S//S1//RCL TO USA. EVEY) Although not violations of E.O. 12333 and related directives.. 
NSA/CSS reports | i nstances in which database access was not tenninated when access was 
no longer required. Once id entified^ the accesses wer e terminated. Additionally, thjbre were two 
instances of account sharing._an instructor in a training class accessed 


the computer and SlCilN 1 database account of a student and queried a fictitious selector. 1 he 
instructor was teaching the class at a location away from NS A Headquarters, and could not 
access his computer account or database. ! wo problems occurred. The first is that the instructor 
accessed another's computer and database account. The second is that he did not/vet his 
fictitious query to ensure the selector did not belong to a I'.S. person. An analys t stopped the 
instructor and deleted the results of the database query. NSA learned 


that two S1G1NT analysts were using a third analyst's account to access NSA databases. 
Although the two analysts were authorized to access the databases, their actions violated NSA 
computer security policies. The analysts' database accounts were disabled and later restored due 
to critical mission support requirements. 

2. (U/fF OUO ) NSA Office of the Inspector General Intelligence Oversight 
Inspections, Investigations, and Special Studies 


(l I//TOUO) During this quarter, the DIG reviewed various intelligence activities of the 
NSA/CSS to determine whether they had been conducted in accordance with statutes. Executive 
Orders. Attorney General procedures, and Department of Defense (DoD) and internal directives. 
With few exceptions, the problems uncovered were routine and showed that operating elements 
understand the restrictions on NSA/CSS activities. 


-'(b) (1) 

(U/ /TOUQ) Misuse of the U>S, SiGINT System (USSS) (b) (3 )-p.l. 86-36 


fSA 

'SI.VREL lOi.MTVl-Vi 

an Army analyst assigned to 

the 


reportedly queried 


jn violation of 








(b) (1) 

(b) (3)-50 USC 3024 (i) 
(b) (3)-P.L. 86-36 


(b)(3)-P.L. 86-36 
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\ *-*/ \ ^ ^ v ^ ^ ^ a V -■- / 
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USS1D SPQ0J8. Reportedly, the analyst queried the foreign numbers to aid in learning the 

language. The analy si s action was not in support of his official, mission-related duties. 


The analyst's database . ceess and his access to classified information have been suspended. 


(U) Congressional, lOB, and DNl Notifications 


(b) (1) 

(b) (3)-P.L. 86-36 


tTt m± 


that 

mirnoses was available to non-COMSil' elements at NS A. 


NSA orally notifie I the Congressional Oversight Committees 
errors, raw data gathered lo r Computer SeeuritN (COMSEC > 


While no I : .S. person data was included in any SIG1NT reporting, 
these | jerre yic lated procedures outlined in the I National 

f.ieeomniuni <m. ns and Information Systems Security Directive (N iTSST> 600) that restrict 
access to raw ( OMSKC data to personnel authorized ti» pi rfot m the COViSl (' mission!./NS A 
has taken appropriate action to correct the errors 

3. (U) Substantive Changes to the NSA/CSS Intelligence Oversight Program 

(U) Nothing to report. 

4. (U) Changes to NSA/CSS published directives or policies concerning 
intelligence, counterintelligence, or intelligence-related activities and the reason 
for the changes 


(t ) Nothing to report. 


(b) (1) 

(b)(3)-18 USC 798 
(b) (3)-50 USC 3024 (i) 
(b)(3)-P.L. 86-36 


5. (U) Procedures governing the activities of DoD intelligence components that 
affect U.S. persons (DoD Directive 5240.1-R, Procedure 15) Inquiries or Matters 
Related to Intelligence Oversight Programs 


(I ) Nothing to report. 
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